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(57) Abstract: A computerised method - and related apparatus, systems, programs for a computer and signals - for securely com- 
municating an electronic document between high and low security domains. Where the data format of the document is not in a 
predetermined set of simple data formats (for example bitmap images or ASCII text), the document is automatically converted to a 
data format in the set. Optionally a "lossy" transformation may also be applied to further confound attackers. The document is then 
conveyed securely to a user sanction function for review and sanction by a human user. Once sanctioned the document is digitally 
signed for onward transmission to the recipient. Especially for transmission from low domain to high domain, user sanctioning of 
document release may be omitted. 
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